Trust and Safety Product/Decision records/2024-06-24 Mechanism for disabling temp accounts
Authors
[edit]Status
[edit]- Accepted on 2024-06-14
Context
[edit]As we deploy temporary accounts, we should allow for the possibility of needing to disable them in an emergency for some reason, after having enabled them.
Options considered
[edit]- Not allowing anonymous editing at all after temporary accounts have been enabled - Finding some way to completely undeploy temp accounts
Decision
[edit]Introduce a config flag to specify that temporary accounts are "known" on the wiki. The known flag can be true, while temporary account auto creation is false. Code that checks a username to see if it is a temp account should use the "known" flag while code that cares about the account creation process should check the "enabled" flag.
Consequences
[edit]- IP editing can be re-enabled on a wiki if "known" is set to true and "enabled" is set to false
- Temp account creation can be safely disabled after being enabled